Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: 7zKd44qd+HMY70yrMkAN/8ri17jbIov2bL9uGnUHQmY=
Subject key identifier: FC:C2:BE:F8:76:17:EC:BB:70:FC:BC:40:AF:09:30:13:19:69:49:3A
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 019D9962F73866346BBDDCBD7A6F5D99C988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:01:32 +0000
Manifest this update: Fri 17 Apr 2026 03:01:32 +0000
Manifest next update: Sat 18 Apr 2026 03:01:32 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: RJ+cafpzYtxavyyw7HKtNZsOkNF7WIPoyoGsFBwh8tI=)
2: OHiJ9XzBUi42gNdFbFSonns_rq0.roa (hash: 5izRR616Szlh4ynpWzSXWkX0E9KgDJBqg2wIQA5yWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:f7:38:66:34:6b:bd:dc:bd:7a:6f:5d:99:c9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Apr 17 03:01:32 2026 GMT
Not After : Apr 18 03:01:32 2026 GMT
Subject: CN=fcc2bef87617ecbb70fcbc40af0930131969493a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:20:ef:1c:98:93:04:f1:ba:86:ff:2f:55:
9c:f9:ea:3f:b5:bb:6b:e0:14:25:9e:df:0f:ab:21:
18:09:ab:a3:3d:8e:bf:f2:0c:36:da:79:6d:dd:de:
f6:50:4b:2b:b5:b4:3d:b0:e5:b5:a2:17:f9:af:a3:
4b:09:8f:2b:28:b5:1e:8d:b9:eb:3b:07:e0:24:50:
b2:5b:29:f7:ee:32:39:96:25:c2:e7:1c:90:0e:d5:
91:35:db:15:22:d3:eb:d2:61:bf:fd:cf:7f:2c:6f:
ab:42:e7:c9:0f:ce:33:8d:65:a6:55:92:1e:28:36:
82:3c:0a:9c:40:5e:31:ac:20:30:6e:3c:ac:bc:1e:
ee:fd:8b:de:bf:5c:18:13:68:62:fe:35:36:a7:8c:
a5:d1:86:3a:09:da:cc:b6:d1:2a:c6:34:de:3c:a1:
50:50:ae:96:e1:c7:ec:4a:2a:37:c9:8b:c9:16:b6:
57:7a:52:b7:48:e1:02:be:3c:30:09:66:a0:1f:03:
57:84:97:70:4d:a1:3a:99:e1:a6:88:8c:93:ba:59:
3e:0f:f9:d7:20:8e:53:31:90:24:3b:fe:45:88:92:
06:a2:2c:6f:d8:62:c7:45:96:27:04:bc:bb:46:58:
7d:7a:e0:7f:66:94:91:fa:5a:fb:5b:07:e2:13:92:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C2:BE:F8:76:17:EC:BB:70:FC:BC:40:AF:09:30:13:19:69:49:3A
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:29:5c:ea:89:10:15:8c:6e:9a:e3:38:7c:0d:fa:9a:fd:45:
dc:3c:c5:23:2f:6a:ef:80:ed:e7:c9:96:f2:28:22:46:17:d4:
6f:5e:bb:f9:68:95:13:8c:c5:2d:40:cb:f8:31:92:9c:21:94:
ee:97:d9:89:30:76:71:0a:cb:7e:b9:9a:2b:52:71:91:bc:e1:
99:cc:15:18:24:4a:05:f1:be:db:bb:1c:26:b5:53:4c:ac:2c:
06:96:88:5e:3d:a9:78:6a:c1:10:c2:76:a4:37:31:46:cf:7c:
44:be:d5:62:96:e3:4e:dd:b5:6e:10:38:ff:83:00:9c:c7:f8:
96:dc:94:52:ec:80:bf:28:af:31:a6:6b:85:38:23:b2:c5:eb:
35:79:5a:7a:16:ed:78:90:49:98:ab:05:64:89:c1:a9:7c:96:
0f:4c:dc:8d:41:6d:d6:50:f9:ce:5a:51:46:70:ae:68:c8:4b:
fa:74:26:ee:a8:85:ae:80:d0:cd:72:92:38:7d:25:7e:e3:7e:
ce:84:fe:9a:aa:23:79:aa:c8:27:6b:f8:27:70:98:f5:d5:22:
86:e9:53:51:8b:14:83:34:75:d6:0f:63:bc:fa:a1:33:2e:ae:
1f:57:a1:1b:b0:52:d1:5b:b0:39:85:c8:b4:ea:7b:f2:57:d3:
ee:7a:2e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:15 2026 by rpki-client